News for hackers. Stuff that matters.

hlieberman

Ah, censorship.
Hilariously broken, unfortunately.
"RFC 9110 defines this shape." nope, I'm fuckin' out.
Re:The Aaronson Oracle on Wednesday October 14, 2026 @11:22AM (#50089032)
An interesting oracle, but my god, the writing is so clearly AI, I just can't stand it. "runs down the center".
Microsoft (Research) beat you to it: https://www.microsoft.com/en-us/research/project/natick/

Still a significantly less dumb idea than space data centers.

Re:Btrfs/ZFS/bcachefs under workloads classic benchmarks skip on Saturday September 19, 2026 @02:59PM (#49769242)
The integrity check is only on the tests which are either RAID or the filesystem equivalent.
Re:Tell HN: An inside view of Montana's new biotech law on Wednesday September 16, 2026 @04:58PM (#49732923)
Wouldn't you be asking the physicians to risk their licenses to administer these drugs? The state can't waive the Food, Drug, and Cosmetics act, so a physician doing so is breaking federal law unless they get a single-patient IND or EUE. I guess if the experimental drug is manufactured in the state, maybe you could claim the FDCA doesn't apply, but... that's a big risk.
Re:Burnt out on a three-day week on Friday September 04, 2026 @11:01AM (#49565672)
Slop is slop, whether you edit it in or whether you generate it de novo.
AI;DR

Slop-py as hell.

What two properties are you choosing from Zooko’s Triangle? You say human readable and decentralized, so you must be giving up secure.
Re:A Year On: The DOGE Disaster on Friday July 17, 2026 @03:56PM (#48951625)
I'd be cautious about looking upwards in the shower; you're stupid enough to drown.
Re:Reimplementing pf as an eBPF/XDP dataplane on Linux on Saturday July 11, 2026 @05:03PM (#48875866)
Considering the author is the founder of pfSense and has been contributing to BSD since 1995, I suspect he knows about the origins of pf.
Re:Chat Control passed first round in EU Parliament on Tuesday July 07, 2026 @11:41AM (#48819361)
Is this Chat Control 1.0 or Chat Control 2.0?
Re:Wikipedia's Cofounder Has Been Banned from Wikipedia on Saturday June 27, 2026 @05:20PM (#48701874)
Reality has a well-known liberal bias.
Re:My automated doubt development process on Monday June 08, 2026 @01:34PM (#48448399)
“They inhabit the fulcrum of the process” is straight up AI psychosis talk.
Security is part of it -- dpkg and apt were not built to deal with the problem of tracking each individual executables' complied library versions. When the next Heartbleed happens, how will you know which things need to be recompiled? (Some of this data exists in adjacent Debian systems for DD's internal use, but it's not integrated into dpkg in any way.)

https://wiki.debian.org/StaticLinking#downsides has some of the background there.

Hello! I am a Debian Developer, though not likely to work on this as I haven't done a ton of rust binary packaging.

I did want to clear up one misconception that you might be having, though. The .deb versions shipped by upstream are great, but they're not really ever going to be useful for Debian. One of the side-effects of Debian's requirements around software freedom is an important principle: you should be able to build any package in Debian with only the things that are in Debian.

The problem with fresh isn't fresh itself -- packaging that isn't particularly difficult, though it does need some amount of care and attention. The problem is that fresh pulls in 732 different crates which all need to be packaged in Debian before fresh can be. Some of them are already in Debian, of course, but... you can imagine that the effort here is very much not insignificant.

Upstream doesn't have to deal with this problem, as they can simply statically build them into the executables. That's a violation of Debian policy, though, and isn't allowed for anything in the archive.

Hope that helps you understand why you may not get many bites at this offer, generous as it is!

Re:The Serial TTL connector we deserve on Saturday May 09, 2026 @08:26PM (#48079722)
TagConnect or EdgeConnect ftw.
Re:CVE-2026-31431: Copy Fail vs. rootless containers on Tuesday May 05, 2026 @01:49AM (#48018557)
That's true... for the exploit demo that they released. The primitive that underlies the exploit, however -- a page cache write -- can easily bypass the container boundary. One only needs to hook an executable which is also present in the host.
Re:CVE-2026-31431: Copy Fail vs. rootless containers on Tuesday May 05, 2026 @12:45AM (#48018137)
In fact, the authors specifically say on the very first line of their website that the copy/fail primitive can be used as a container escape. The entire premise of this article is flawed and irresponsible.
… really? This is simultaneously so far down in the plumbing and extremely resistant to measuring the impact of, I can’t imagine anyone building a company off of this that’s not already deep in the weeds (lookin’ at you, WolfSSL).

The idea that a startup would be competitive in the VC “the only thing that matters are the feels” environment seems crazy to me.

"(b) The term does not include the distribution of bona fide news, commentary, or editorial content unless the publishing entity is owned or controlled by a political party, a political committee, or a candidate".
Re:The Architecture of Asking on Sunday March 22, 2026 @03:32PM (#47481203)
This is some hallucinatory slop bullshit.
Forget Node.js; _Javascript_ hadn't even been invented yet when Erlang and BEAM first debuted.
There is no carve out in the law for open source. I don’t think it matters for this calculator’s firmware, because there’s no covered App Store, but it certainly would for most Linux distributions.
Re:MHRA approves self replicating mRNA Covid-19 vaccine on Monday January 05, 2026 @11:45AM (#46501105)
Note, this vaccine has been approved in Japan since late 2023.
Re:Public Sans – A strong, neutral typeface on Tuesday December 30, 2025 @10:08AM (#46434024)
No, this was a project by 18F and the U.S. Web Design group that debued several years back.
If there is an aircraft evacuation and someone is getting their bag out of the carry-on, the proper response is punching them in the face and throwing them onto the ground so people can step over (or on) them.

With seat pitches so tight these days, the idea that an evacuation can be done by unprepared people in 90 seconds is a pipedream, even before taking into consideration people trying to get their luggage.

Re:Fighting the New York Times' invasion of user privacy on Wednesday November 12, 2025 @09:35AM (#45900722)
An incredibly cynical attempt at spin from a former non-profit that renounced its founding principles. A class act, all around.
Re:The Privacy Theater of Hashed PII on Monday October 20, 2025 @12:55AM (#45640277)
If it's salted, you can't share it with a third-party and determine who your customers in common are. (That's the point of the salt; to mean that my_hash(X) != your_hash(X)).

Older »